Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: whizh/9OK/Etw1IYeq6M2pCl7j1QaeFQdZQPhnHXPR8=
Subject key identifier: 95:6D:72:D6:11:03:5B:A9:27:01:8C:1F:CB:B5:E1:11:02:55:14:18
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019A51511EB892BC70F444DFCAFD4396CD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0A30
Signing time: Wed 05 Nov 2025 00:01:02 +0000
Manifest this update: Wed 05 Nov 2025 00:01:02 +0000
Manifest next update: Thu 06 Nov 2025 00:01:02 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: SdzcuL3N6xOGLnIIi5G+weHwDpI3ciVa3hLv4ukpv+c=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:1e:b8:92:bc:70:f4:44:df:ca:fd:43:96:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Nov 5 00:01:02 2025 GMT
Not After : Nov 6 00:01:02 2025 GMT
Subject: CN=956d72d611035ba927018c1fcbb5e11102551418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:43:02:00:4a:f1:7d:1c:56:26:85:b2:11:
31:17:b3:80:12:f6:d9:36:44:5a:f5:93:0b:63:06:
58:e1:10:04:8f:16:4c:e6:41:e6:97:fa:54:4f:18:
1f:bc:26:00:78:39:2c:76:c4:c6:39:9f:02:ed:69:
6b:4d:9b:84:08:a1:d0:5f:f7:c7:5c:10:0d:fd:e5:
10:ae:42:d8:80:35:29:e9:6d:03:8a:eb:b4:9d:9d:
15:cb:20:2a:7a:b8:b6:28:00:04:03:05:f2:0c:df:
b3:40:b4:36:d0:32:2c:67:6f:5b:d2:b4:24:68:48:
a9:b3:ae:34:85:48:73:40:62:bd:f3:f1:73:b7:c6:
84:13:93:d4:94:b6:e7:9e:01:51:a1:59:0c:21:fa:
6c:d4:c0:fe:ec:f3:47:36:46:2f:33:93:61:cb:63:
c4:62:6a:0b:3a:04:dc:0e:58:05:7c:16:07:bd:22:
27:5d:d4:8b:6e:20:85:17:be:78:86:44:cc:f0:1c:
d5:fd:4a:ea:d7:e2:53:78:59:f9:87:c4:d0:65:30:
d6:ce:ad:50:f0:ff:44:b0:92:b9:97:e6:41:0b:24:
cf:44:13:50:87:08:97:94:25:f0:36:6e:aa:1c:9a:
c1:fc:d9:7e:7d:32:10:f5:8f:16:fa:a4:34:12:fd:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:72:D6:11:03:5B:A9:27:01:8C:1F:CB:B5:E1:11:02:55:14:18
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:20:10:3a:5d:2e:17:87:7c:ee:7c:f6:ad:eb:c6:a6:2f:9e:
56:c8:16:ec:a0:85:11:4f:37:ed:23:d2:f9:ec:a0:7e:b6:f3:
41:06:08:87:67:3c:3c:95:e0:f1:a0:59:a0:2c:f7:f6:46:f2:
04:35:3e:74:b9:93:ac:6f:bc:a6:27:59:0e:52:66:fc:7c:92:
3d:44:d2:28:54:3b:24:46:41:e1:31:f4:ac:f5:9c:c4:72:5f:
31:5a:66:e0:6e:bc:49:c6:72:e8:3e:35:bb:86:1d:39:aa:76:
63:0b:e9:3e:49:b9:ca:2b:66:d5:e6:cb:5d:58:cf:43:8b:6d:
ab:c2:6d:c7:a8:8f:15:11:44:96:c6:39:5e:67:76:fa:9f:c0:
31:89:5b:eb:61:6b:40:f9:d1:ce:61:24:0e:db:ec:8a:2d:a8:
0f:c3:dd:43:5d:8c:ac:03:46:a7:25:fd:cf:e1:5b:5d:82:39:
ed:7f:7f:18:31:ff:fc:2b:8d:b3:85:97:ed:60:7c:4d:c9:a2:
6e:b0:c8:b7:40:33:0b:3c:46:55:b2:89:0d:e7:bd:ee:ec:69:
6d:19:9d:8d:7c:8b:75:26:60:f2:50:bc:76:15:c4:27:11:36:
73:f4:4d:7a:6f:44:aa:c4:82:e6:fc:e1:52:3c:75:d7:0a:87:
d3:d1:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:34 2025 by rpki-client